$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/593FC45EB89011EA8C060064C4F9AE02.roa File: 593FC45EB89011EA8C060064C4F9AE02.roa (raw, json) Hash identifier: sEqiEs5IQnIMD0fm87k6VrSFmcriEzJRh8Kb+n14+C8= Subject key identifier: 63:90:D6:E4:9C:A3:9E:B9:8C:82:3B:BD:E4:BC:67:4C:43:34:E7:6E Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 0789 Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/593FC45EB89011EA8C060064C4F9AE02.roa Signing time: Wed 08 Nov 2023 21:49:26 +0000 ROA not before: Wed 08 Nov 2023 21:49:26 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 45496 IP address blocks: 113.29.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Validity Not Before: Nov 8 21:49:26 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=654c0266-eadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:4e:9d:f0:fd:f2:a7:f5:5b:38:78:df:3c: aa:5d:75:e6:dc:04:7f:f6:61:69:22:bf:5f:5f:1f: 0e:20:15:21:5e:6d:39:93:30:54:2b:6f:54:3e:b7: 7e:93:2c:83:e1:19:ad:e5:ce:52:90:88:14:f3:45: 99:5f:11:29:97:59:e6:80:f8:f4:dc:b5:37:aa:73: d5:f8:ed:3d:e9:39:27:07:9b:c3:1c:67:1c:08:33: e6:cd:f6:83:79:29:3b:6c:47:e2:3f:b0:10:cc:5b: 91:8b:0a:da:a9:4b:b5:88:39:e3:38:0e:0f:25:a1: d7:13:58:8e:5b:ac:f3:64:2c:b8:4a:cc:7f:54:57: ec:58:4c:8d:a0:25:30:c8:51:a4:5f:30:12:33:30: a9:a1:b4:a5:73:bf:22:13:4b:0e:f6:81:48:b9:25: 31:c1:32:34:bf:93:39:0c:b1:66:7c:94:f7:c6:35: e1:22:e2:90:12:3c:3e:ba:cb:54:aa:b2:fb:fd:4e: 9b:17:ab:b9:5f:20:8b:fc:91:d8:93:74:e2:df:bb: d6:aa:ea:7b:61:a9:4e:ff:85:fd:bb:8f:d3:a3:53: c8:21:4e:e0:e5:d2:b3:81:aa:a0:bd:55:14:e6:ff: f1:7e:61:61:4c:a7:ff:a5:bf:9d:e9:4d:73:a1:b3: 10:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:90:D6:E4:9C:A3:9E:B9:8C:82:3B:BD:E4:BC:67:4C:43:34:E7:6E X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/593FC45EB89011EA8C060064C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.29.252.0/22 Signature Algorithm: sha256WithRSAEncryption b9:77:3a:88:98:39:42:88:67:92:0b:1e:7a:b6:61:cd:3f:4c: 11:dd:c5:48:b6:53:cc:63:c7:aa:05:2e:9d:c1:e8:fb:ef:0c: 60:43:5a:7b:a3:ef:99:43:f5:2c:c4:7e:29:e8:7a:bb:40:f9: ba:6e:5f:e8:ea:b6:a2:b4:22:15:fb:91:53:5a:9a:e9:1b:f5: 4f:bc:64:c9:c2:87:ae:67:ae:76:fa:37:6f:ac:64:d7:e2:9b: 53:38:44:c7:ca:32:f2:28:c0:2c:d1:f1:37:bb:22:1d:86:8e: 70:11:3e:af:86:d6:2e:d6:f0:32:9c:c8:7d:41:54:9e:85:51: 50:23:e8:11:98:f9:2f:13:92:45:c5:71:f3:39:92:b7:d3:81: 0d:91:40:17:f1:36:92:f1:af:e2:04:b6:93:10:c3:07:91:a1: d0:d9:d9:7e:77:d9:23:47:dd:f0:22:6c:16:2a:84:dc:73:fb: ea:a1:0e:7a:d6:79:8b:e8:3f:dd:ae:ca:c8:d4:35:aa:7a:8f: 6a:9f:bb:72:6f:c6:15:0b:de:f6:d3:2a:dd:4f:f7:9d:3f:03: 48:d3:40:81:b0:d8:6d:e0:14:be:c3:7d:68:6d:18:a9:a9:4f: a5:a9:48:82:0b:69:c7:5a:fe:7e:11:5b:cc:bf:66:3c:02:74: a6:42:95:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjMxMTA4MjE0OTI2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRjMDI2Ni1lYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8hOnfD98qf1Wzh43zyqXXXm3AR/9mFpIr9fXx8OIBUhXm05kzBUK29UPrd+ kyyD4Rmt5c5SkIgU80WZXxEpl1nmgPj03LU3qnPV+O096TknB5vDHGccCDPmzfaD eSk7bEfiP7AQzFuRiwraqUu1iDnjOA4PJaHXE1iOW6zzZCy4Ssx/VFfsWEyNoCUw yFGkXzASMzCpobSlc78iE0sO9oFIuSUxwTI0v5M5DLFmfJT3xjXhIuKQEjw+ustU qrL7/U6bF6u5XyCL/JHYk3Ti37vWqup7YalO/4X9u4/To1PIIU7g5dKzgaqgvVUU 5v/xfmFhTKf/pb+d6U1zobMQIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGOQ1uSc o565jII7veS8Z0xDNOduMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ1MUQvNUNCMUVBMDZCODhFMTFFQUJBMzNBQzYxQzRGOUFFMDIvNTkzRkM0NUVC ODkwMTFFQThDMDYwMDY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJxHfwwDQYJKoZIhvcNAQELBQADggEBALl3OoiYOUKIZ5IL Hnq2Yc0/TBHdxUi2U8xjx6oFLp3B6PvvDGBDWnuj75lD9SzEfinoertA+bpuX+jq tqK0IhX7kVNamukb9U+8ZMnCh65nrnb6N2+sZNfim1M4RMfKMvIowCzR8Te7Ih2G jnARPq+G1i7W8DKcyH1BVJ6FUVAj6BGY+S8TkkXFcfM5krfTgQ2RQBfxNpLxr+IE tpMQwweRodDZ2X532SNH3fAibBYqhNxz++qhDnrWeYvoP92uysjUNap6j2qfu3Jv xhUL3vbTKt1P950/A0jTQIGw2G3gFL7DfWhtGKmpT6WpSIILacda/n4RW8y/ZjwC dKZClSk= -----END CERTIFICATE-----Generated at Mon May 6 23:05:39 2024 by rpki-client on console-fra.rpki-client.org